{"id":3048520,"url":"https://alion.io/job/td-bank-group-information-security-analyst-biso","title":"Information Security Analyst (BISO)","company":{"id":3167,"name":"TD Bank Group","domain":"td.com","url":"https://alion.io/company/td-bank","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":100,"open_postings":667,"ghost_share":0.004,"stale_share":0.141,"repost_share":0.036,"time_to_fill_p50_days":13,"computed_at":"2026-10-28T05:59:10Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":43000,"max_usd":92000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":40},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":true},{"name":"ISO 27001","optional":true},{"name":"Jira","optional":true}],"status":"live","first_seen_at":"2026-10-13T00:00:00Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-28T16:21:29Z","board_verified":true,"closed_at":null,"days_open":15,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":15},"description":"Work Location:\nSingapore, SingaporeHours:\n40Line of Business:\nTechnology SolutionsPay Details:\nWe’re committed to providing fair and equitable compensation to all our colleagues. As a candidate, we encourage you to have an open dialogue with a member of our HR Team and ask compensation related questions, including pay details for this role.\nJob Description:\nRole Overview\nThe BISO L08 role provides Technology and Cybersecurity risk support, governance, assessment and oversight activities across APAC. The role partners with business, technology, application owners and control functions to identify and assess technology and cybersecurity risks, support the incorporation of appropriate controls into application and solution design, and assist with regulatory, audit and risk management requirements.\nKey Accountabilities\nTechnology & Cyber Risk Assessments\nLead assigned Technology Asset Risk Assessments (TARA) under the guidance and oversight of senior BISO team members, including reviewing information provided by business and technology owners and assessing technology assets against applicable risk criteria.\nPerform and support Control Gap Assessments (CGA), evaluating whether applicable security and technology controls are appropriately designed and documenting identified control deficiencies for remediation or formal risk treatment.\nContribute to application and technology risk assessments across confidentiality, integrity, availability and applicable regulatory considerations using available architecture, design, control and risk information.\nApplication & Design Assessments\nSupport security and technology risk assessments for new applications, material application changes and technology initiatives, including review of architecture and solution designs.\nContribute to design assessments to determine whether security and technology controls are appropriately incorporated into proposed solutions and identify potential risks or control gaps requiring remediation.\nReview relevant artifacts such as architecture blueprints, system and process flows, TARA and CGA results, findings, security assessments and supporting evidence when contributing to risk assessments and documented outcomes.\nAssist in assessing whether system designs align with applicable security requirements and whether key security capabilities, including authentication, access control and cryptography, have been appropriately considered.\nRisk Assessment & Control Gap Suppor t\nSupport 1B risk assessment and challenge activities by reviewing risk assessments, control gaps, findings and remediation plans under the guidance of senior BISO team members.\nReview identified control deficiencies, risk ratings, remediation strategies and supporting evidence and contribute to documenting and tracking issues through established governance processes.\nProvide guidance to Technology Asset Owners, Business Asset Owners and project teams within defined parameters on technology and cybersecurity risk requirements, controls and assessment activities.\nAPAC Governance & Regulatory Suppor t\nSupport APAC-specific technology and cybersecurity assessments, including jurisdictional and outsourcing assessments where required, working with Compliance, ORM and other control partners.\nSupport regulatory reviews, audit activities, findings management, remediation efforts and evidence requirements across APAC.\nContribute to risk assessments, observations and recommendations for technology initiatives and applications, supported by relevant assessment artifacts.\nStakeholder Engagement\nWork with application owners, technology teams, business stakeholders, Architecture, GSD, ORM, Compliance, Internal Audit and other SMEs to support the completion of assessments and resolution of identified risks.\nCommunicate technology and cybersecurity risks, observations and assessment outcomes to technical and non-technical stakeholders.\nEstablish effective relationships across business and technology partners, program managers and project teams to support risk management and governance activities.\nRequirements\nRequired Qualifications\nUniversity degree in Information Security, Cybersecurity, Computer Science, Information Technology, Risk Management, or a related discipline.\n3-5 years of experience in Information Security, Cyber Risk, Technology Risk, IT Controls, Governance, Risk & Compliance (GRC), Audit or a related field.\nExperience supporting or conducting technology risk assessments, control reviews, audit activities or governance processes.\nSound knowledge of technology controls, cybersecurity principles and risk management practices.\nAbility to assess and document technology and cybersecurity risks and control gaps.\nStrong stakeholder management and written and verbal communication skills.\nAbility to manage multiple priorities and deliver quality results within established timelines.\nPreferred Qualifications\nInformation Security certification such as CISSP, CISM, CRISC, Security+, or equivalent, considered an asset.\nExperience supporting TARA, CGA, technology risk assessments, audit reviews, regulatory examinations or technology governance activities.\nExperience working within a regulated financial services environment.\nFamiliarity with NIST, ISO 27001, CIS Controls, COBIT or equivalent industry frameworks.\nExposure to cloud technologies, application security, identity and access management, or technology outsourcing assessments.\nExperience with governance and risk management tools such as RSA Archer, as well as Agile delivery frameworks and Jira.\nWho We Are\nTD Securities is one of the world's leading global financial institutions and is the fifth largest bank in North America by branches/stores. Every day, we strive to make every interaction, product, and experience remarkably human and refreshingly simple for over 27 million households and businesses in Canada, the United States and around the world. More than 95,000 TD colleagues bring their skills, talent, and creativity to foster deeper relationships, ensure disciplined execution, and build a simpler, faster banking experience. TD is deeply committed to being a leader in client experience, that is why we believe that all colleagues, no matter where they work, are client facing. Together, we are reimagining what banking can be for our clients, colleagues and communities.\nOur Total Rewards Package\nOur Total Rewards package reflects the investment we make in our colleagues to help them, and their families achieve their well-being goals. Total Rewards at TD includes a base salary and several other key plans such as health and well-being benefits, including medical coverage, paid time off, career development, and reward and recognition programs.\nAdditional Information:\nWe’re delighted that you’re considering building a career with TD. Through regular development conversations, training programs, and a competitive benefits plan, we’re committed to providing the support our colleagues need to thrive both at work and at home.\nColleague Development\nIf you’re interested in a specific career path or are looking to build certain skills, we want to help you succeed. You’ll have regular career, development, and performance conversations with your manager, as well as access to an online learning platform and a variety of mentoring programs to help you unlock future opportunities.\nIf you’re passionate about helping clients and building deep, lasting relationships, TD offers diverse career paths where you can grow your expertise and make a meaningful impact.\nWe're committed to your success and foster a respectful workplace where diverse perspectives are valued, everyone has fair opportunities to grow, and you can unlock your full potential to achieve your career goals. Here at TD, we hire and develop the best.\nTraining & Onboarding\nWe will provide training and onboarding sessions to ensure that you’ve got everything you need to succeed in your new role.\nInterview Process\nWe’ll reach out to candidates of interest to schedule an interview. We do our best to communicate outcomes to all applicants by email or phone call.\nAccommodation\nIf you require an accommodation for the recruitment / interview process (including alternate formats of materials, or accessible meeting rooms or other accommodation), please let us know and we will work with you to meet your needs.","description_format":"text","description_chars":8373,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Mentoring programs"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Commercial & Retail Banks","Information Security","Investment Banking & M&A Advisory","Online Brokerage & Trading Platforms"],"lifecycle":[{"event":"open","at":"2026-10-22T01:32:24Z"}],"visa":[],"liveness":{"score":43,"band":"fade","label":"Fading","p_open":1,"p_active":0.774,"p_room":0.55,"age_days":15,"expected_fill_days":13,"reasons":["conf:6","velocity","win:tail","comp:brand"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/td-bank-group-information-security-analyst-biso","json_url":"https://alion.io/job/td-bank-group-information-security-analyst-biso.json","meta":{"generated_at":"2026-10-28T19:23:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":26756,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3167},"rest":"https://alion.io/mcp/rest/get_company?id=3167"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftd-bank-group-information-security-analyst-biso"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftd-bank-group-information-security-analyst-biso"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftd-bank-group-information-security-analyst-biso"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/td-bank-group-information-security-analyst-biso\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftd-bank-group-information-security-analyst-biso"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3048520}},{"tool":"search_jobs","arguments":{"company":"td.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3048520},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}